{"uuid": "57f7f65c-e005-4733-bc52-0f27a4d8b198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://t.me/pphm_HackerNews/2956", "content": "\ud83d\udd34 Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks\n\nNearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attackers to hijack all user mailboxes.\n\nTracked as CVE-2026-62911 and reported by DEVCORE Research Team's Orange Tsai, this security flaw affects Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition (SE) software. Threat actors with basic privileges on the targeted server can exploit it in low-complexity attacks that require user interaction.", "creation_timestamp": "2026-09-02T01:00:20.623596Z"}